2 ms·
Nah; with years of experience in the security space, and a chunk of those working at a browser vendor, watching bug classes vanish (even if it's the expense of
by ygjb 4y ago
Nah; with years of experience in the security space, and a chunk of those working at a browser vendor, watching bug classes vanish (even if it's the expense of some usability) is worth it when I imagine the tears of bad guys who have to work harder, and the users who won't have to go through the charade of credit monitoring services offered by some of the worst companies in the world.
They are specifically calling out that it's not ready for prime time, and that it will have an impact on users. In practice, many very effective security controls for browsers (and other software) get tuned down or disabled by default because they break too much of how the web works (SameSite cookies are a good example), or because it creates friction in customer acquisition or growth.